@anhlp/alp 0.0.1-beta.3 → 0.0.1-beta.4

package/docs/modular-monorepo.md

@@ -9,7 +9,7 @@ packages/       ALP libraries and executables, published as @anhlp/alp-*
   protocol  core  runtime  client  daemon  cli
 integrations/   optional adapters to external hosts, each a separate package
   paseo/        @anhlp/alp-paseo (Paseo plugin, web app, relay)
-  web.json      development-only descriptor; not shipped in core
+  paseo.json    development-only descriptor; not shipped in core
 apps/           standalone applications
   tui/          @anhlp/alp-tui (reserved, private)
 ```
@@ -83,16 +83,15 @@ npm test -w @anhlp/alp-core # one package, independently
 
 Every run uses an isolated `ALP_HOME`. `npm run test:packages` runs each package's own `npm test` in turn; it overlaps with `test:unit` and is meant for checking that a package tests on its own. Live `test:e2e:*` scripts require authenticated providers (and sometimes a running Paseo host). `test/integration/layout.test.js` fails when a test file sits outside these directories, is selected twice, or names a package its own package does not depend on.
 
-Every core workspace — protocol, core, runtime, client, daemon and CLI — compiles and tests without a web build; `scripts/build-core.mjs` emits the neutral core bundles and the six core packages' tests never build the plugin. Packing the optional plugin requires the pinned web app; packing `@anhlp/alp` does not:
+Every core workspace — protocol, core, runtime, client, daemon and CLI — compiles and tests without a web build; `scripts/build-core.mjs` emits the neutral core bundles and the six core packages' tests never build the plugin. Packing needs only the packages' own builds:
 
 ```sh
-npm run build:web
 npm run build:packages
 npm run release:pack-check
 npm run test:packages:smoke
 ```
 
-Plugin prepack verifies its web artifact's pinned Paseo commit and patch inventory; core prepack runs only the core build. The daemon and CLI distributions carry `alpd.js` (CLI also `acp.js`) but no web app; the plugin ships the web app and the integration entry (`server/dist/main.js`), and the root `@anhlp/alp` distribution ships only core artifacts. The existing Claude SDK external dependency remains declared in the executable distributions.
+Plugin prepack builds the plugin; core prepack runs only the core build. The daemon distribution carries `alpd.js`; the CLI carries `alpd.js`, `acp.js` and `alp web`'s service with ALP's own app (`dist/alp-web.js`, `dist/alp-web/`); the plugin ships the bridge and the integration entry (`server/dist/main.js`) with Paseo's licence (`LICENSE.paseo.txt`), and no web app since Paseo's web app (`paseo-web/`) was removed (t-55ce.3); the root `@anhlp/alp` distribution ships only core artifacts. The existing Claude SDK external dependency remains declared in the executable distributions.
 
 ### Breaking migration: the daemon no longer serves the web app
 
@@ -100,9 +99,9 @@ The web/Paseo surface moved out of the neutral daemon into the optional plugin.
 
 | Removed | Replacement |
 | --- | --- |
-| `@anhlp/alp-daemon/web` (`createWebServer`, `createPaseoBridge`, `webAppDir`, `webFile`, `DEFAULT_WEB_PORT`) | `@anhlp/alp-paseo/web` (same named exports) |
+| `@anhlp/alp-daemon/web` (`createWebServer`, `createPaseoBridge`, `webAppDir`, `webFile`, `DEFAULT_WEB_PORT`) | `@anhlp/alp-paseo/web` (the same named exports, except `webAppDir`, removed with Paseo's web app in t-55ce.3; `createWebServer` takes `gateway`, and its `app` option is deprecated) |
 
-`@anhlp/alp-daemon` keeps only its `index`, `lock`, `main`, `server` and `store` subpaths; the `web` export and `src/web.ts` are gone, so an `alp-daemon/web` import now fails at resolution. The daemon's neutral core bundles (`dist/runtime/index.js`, `dist/daemon/index.js`, `dist/alpd.js`, `dist/acp.js`, `dist/acp/agent.js`) never include the plugin or `@getpaseo`; `npm run check:boundaries` reads `dist/build-manifest.json` to prove it. The plugin's own subpaths (`@anhlp/alp-paseo`, `/main`, `/web`, `/paseo/*`, `/panel/*`) replace the old in-daemon copies, and Paseo's installed integration can register its descriptor at `$ALP_HOME/integrations/web.json` using `alp-web-integration --register`.
+`@anhlp/alp-daemon` keeps only its `index`, `lock`, `main`, `server` and `store` subpaths; the `web` export and `src/web.ts` are gone, so an `alp-daemon/web` import now fails at resolution. The daemon's neutral core bundles (`dist/runtime/index.js`, `dist/daemon/index.js`, `dist/alpd.js`, `dist/acp.js`, `dist/acp/agent.js`) never include the plugin or `@getpaseo`; `npm run check:boundaries` reads `dist/build-manifest.json` to prove it. The plugin's own subpaths (`@anhlp/alp-paseo`, `/main`, `/web`, `/paseo/*`, `/panel/*`) replace the old in-daemon copies, and Paseo's installed integration can register its descriptor at `$ALP_HOME/integrations/paseo.json` using `alp-paseo-integration --register` (`alp-web-integration` is an alias for one release).
 
 Migrate an in-repo consumer in two steps:
 
@@ -122,7 +121,7 @@ The six core workspaces depend only on `@anhlp/*` packages and their own declare
 | Package | Declares `@getpaseo/*` | Provides |
 | --- | --- | --- |
 | `@anhlp/alp-protocol` … `@anhlp/alp-cli` | no | the neutral core |
-| `@anhlp/alp-paseo` | peers `@getpaseo/plugin`, `@getpaseo/client`, `@getpaseo/protocol`, `@getpaseo/relay` (and React) | the Paseo host adapter, the web app and the panels |
+| `@anhlp/alp-paseo` | peers `@getpaseo/plugin`, `@getpaseo/client`, `@getpaseo/protocol`, `@getpaseo/relay` (and React) | the Paseo host adapter, the bridge and relay, and the panels |
 
 `npm run release:pack-check` packs the main distribution and each public workspace, rejects Paseo paths in core tarballs and verifies public exports; `npm run release:tarball-check` then installs the tarballs in isolation — the core set with no `@getpaseo`, plugin or React package must import and typecheck, and the plugin must install with its declared peers.
 
@@ -130,15 +129,19 @@ The six core workspaces depend only on `@anhlp/*` packages and their own declare
 
 The daemon hosts *neutral* IPC extensions: a connection registers a method with `extension.register`, owns it until it disconnects or calls `extension.unregister`, and the daemon routes `extension.invoke` calls back to the owner (bounded pending calls, torn down on disconnect). The daemon assigns no meaning to a method. The plugin registers `web.pairing` on its alpd connection and re-registers it after a daemon restart; `alp web pair` waits for the fresh registration instead of failing on an unknown method.
 
-The plugin's per-process data stays under the selected home, never inside the daemon: the integration lock is `<home>/integrations/web.lock`, the ready address is `<home>/web.json`, the registered descriptor is `<home>/integrations/web.json`, and the log is `<home>/logs/integrations/paseo.log`. `alp web` reads the lock and `web.json` and ignores a stale file named by another pid. Set `ALP_HOME` to keep everything in one directory.
+The plugin's per-process data stays under the selected home, never inside the daemon: the integration is named `paseo`: its lock is `<home>/integrations/paseo.lock`, the ready address is `<home>/paseo.json`, the registered descriptor is `<home>/integrations/paseo.json`, and the log is `<home>/logs/integrations/paseo.log`. `alp web pair` reads the lock and `paseo.json` and ignores a stale file named by another pid. `alp web` itself runs the CLI's `alp-web` service, which owns `integrations/web.lock` and `<home>/web.json` ([docs/alp/web.md](alp/web.md) §3.1). Set `ALP_HOME` to keep everything in one directory.
+
+The Paseo integration serializes every lock mutation with the exclusive directory `<home>/integrations/paseo.lock.reclaim`. The protocol is `createIntegrationLock(home, name)` from `@anhlp/alp-client/integration-lock`; an integration named `<name>` uses `integrations/<name>.lock` and `integrations/<name>.lock.reclaim` with the same rules (the Paseo integration uses `paseo`; `alp-web` uses `web`). It never reaps this guard by age or PID. A stalled initializer/reclaimer retains exclusion; a crash during even a short guarded operation can require manual recovery. A complete recognized lock is automatically recovered only when its positive PID is absent (`ESRCH`) in the same boot context. Live PIDs (including reused PIDs), permission errors, unknown liveness errors, boot uncertainty, malformed locks and unsupported metadata never authorize takeover. Ready updates and release check the acquired lifetime nonce and file identity.
+
+This guarantee requires a private local filesystem on one host in the same PID namespace, with **all integration writers using this protocol**. Stop all old integration processes before upgrading; the directory guard alone does not make competing old/new writers safe. Network/shared homes, live manual lock deletion/replacement and storage power-loss durability are outside the guarantee. After a stranded guard or malformed lock, first stop and wait for **ALL integration processes using that ALP_HOME**. Only then remove that integration's `integrations/<name>.lock` and `integrations/<name>.lock.reclaim` (including its guard token), and restart. Retain the web configuration, daemon state and separate `state/paseo-create/writer.lock`/receipt journal; this recovery procedure does not authorize changing them.
 
 #### Restart and upgrade
 
-Restarting is non-destructive. `alp daemon restart` (or the plugin's supervision) starts a fresh daemon; the plugin reconnects and re-registers its extensions, and sessions resume from their threads at the next prompt. A daemon left running by an older install is never killed or migrated in place: `alp web` reports that it is "older than this alp (alp daemon restart)" and waits for the operator, so a restart to migrate is always explicit.
+Restarting is non-destructive. `alp daemon restart` (or the plugin's supervision) starts a fresh daemon; the plugin reconnects and re-registers its extensions, and sessions resume from their threads at the next prompt. A daemon left running by an older install is never killed or migrated in place: run `alp daemon restart` to move to the new build, so a restart to migrate is always explicit.
 
 ## Independent versions and publishing
 
-> **For the beta `0.0.1-beta.3`, do not use the commands in this section.** The beta gives all
+> **For the beta `0.0.1-beta.4`, do not use the commands in this section.** The beta gives all
 > eight published packages one version, packs them once and publishes those tarballs with
 > `--tag beta`, following the manual checklist in [beta-scope.md](alp/beta-scope.md) §7. The
 > `npm publish` below has no `--tag`, so it would set `latest`.
@@ -205,6 +208,7 @@ ACP stdio handshake, prompt and streamed response with a fake provider. Installe
 artifacts and the complete npm dependency tree are checked for Paseo leakage.
 The existing runtime/reconnect test also runs against the six installed packages.
 
-To retain the web UI after upgrading core, install `@anhlp/alp-paseo` separately
-and run `alp-web-integration --register` in the intended `ALP_HOME` (global PATH
-discovery also works). See the [plugin installation and compatibility notes](../integrations/paseo/README.md#optional-web-installation).
+`alp web` ships in the CLI (the `alp-web` service) and needs no plugin. To pair
+Paseo's app on another device after upgrading core, install `@anhlp/alp-paseo`
+separately and run `alp-paseo-integration --register` in the intended `ALP_HOME`
+(global PATH discovery also works). See the [plugin installation and compatibility notes](../integrations/paseo/README.md#optional-web-installation).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anhlp/alp",
-  "version": "0.0.1-beta.3",
+  "version": "0.0.1-beta.4",
   "description": "ALP command line and alpd, the per-user daemon that runs filesystem-defined Codex and Claude Code agent teams",
   "type": "module",
   "files": [
@@ -41,7 +41,6 @@
     "test:e2e:human": "node test/e2e/human-e2e.mjs cli && node test/e2e/human-e2e.mjs paseo",
     "test:e2e:board": "node scripts/build-core.mjs && node test/e2e/board-e2e.mjs",
     "prepack": "npm run build",
-    "build:web": "node scripts/build-paseo-web.mjs",
     "build:packages": "npm run build --workspaces --if-present",
     "test:packages": "npm run test --workspaces --if-present",
     "check:boundaries": "node scripts/check-boundaries.mjs",
@@ -91,9 +90,9 @@
     "zod": "4.4.3"
   },
   "dependencies": {
-    "@anhlp/alp-client": "0.0.1-beta.3",
-    "@anhlp/alp-core": "0.0.1-beta.3",
-    "@anhlp/alp-protocol": "0.0.1-beta.3",
+    "@anhlp/alp-client": "0.0.1-beta.4",
+    "@anhlp/alp-core": "0.0.1-beta.4",
+    "@anhlp/alp-protocol": "0.0.1-beta.4",
     "@anthropic-ai/claude-agent-sdk": "^0.3.292",
     "smol-toml": "1.9.0"
   },
@@ -122,5 +121,8 @@
     "apps/gateway",
     "integrations/paseo",
     "apps/web"
-  ]
+  ],
+  "optionalDependencies": {
+    "node-pty": "1.2.0-beta.15"
+  }
 }

package/packages/cli/dist/THIRD-PARTY-NOTICES.txt

@@ -579,6 +579,31 @@ WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
 IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
+================================================================================
+ws@8.22.0 (MIT)
+================================================================================
+
+Copyright (c) 2011 Einar Otto Stangvik <einaros@gmail.com>
+Copyright (c) 2013 Arnout Kazemier and contributors
+Copyright (c) 2016 Luigi Pinca and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
 ================================================================================
 zod@4.4.3 (MIT)
 ================================================================================

package/packages/cli/dist/acp/main.js

@@ -6,7 +6,7 @@ import { startDaemon } from "@anhlp/alp-client/supervise";
 import { createLogger } from "@anhlp/alp-core/log";
 import { createAcpAgent } from "./agent.js";
 async function runAcp({ daemonEntry }) {
-  const version = true ? "0.0.1-beta.3" : "0.0.0";
+  const version = true ? "0.0.1-beta.4" : "0.0.0";
   const logger = createLogger({ component: "acp" });
   const log = (message, fields) => logger.warn(message, fields);
   const app = createAcpAgent({

package/packages/cli/dist/acp.js

@@ -18552,10 +18552,40 @@ var AlpRpcError = class extends Error {
 };
 var ERROR = Object.freeze({ failed: 1e3, notFound: 1001, forbidden: 1003, conflict: 1004, unavailable: 1005, protocol: 1006 });
 var RPC_ERROR = Object.freeze({ parseError: -32700, invalidRequest: -32600, methodNotFound: -32601, invalidParams: -32602 });
-var CAPABILITY = Object.freeze({ attachAfter: "attach.after", promptReceipts: "prompt.receipts", extensionMethods: "extension.methods", team: "team", task: "task", library: "library", libraryProjectWrite: "library.project.write", settingsLanguage: "settings.language", sessionListPage: "session.list.page", questionWatch: "question.watch", questionWatchTurns: "question.watch.turns", workspaceFiles: "workspace.files", workspaceFilesRead: "workspace.files.read", promptImages: "prompt.images" });
+var CAPABILITY = Object.freeze({ sessionInterruptTurn: "session.interrupt.turn", attachAfter: "attach.after", sessionHistory: "session.history", workspaceRegistry: "workspace.registry", workspaceWorktree: "workspace.worktree", workspaceGit: "workspace.git", promptReceipts: "prompt.receipts", extensionMethods: "extension.methods", team: "team", task: "task", library: "library", libraryProjectWrite: "library.project.write", settingsLanguage: "settings.language", sessionListPage: "session.list.page", questionWatch: "question.watch", questionWatchTurns: "question.watch.turns", sessionAttention: "session.attention", workspaceFiles: "workspace.files", workspaceFilesRead: "workspace.files.read", promptImages: "prompt.images", schedule: "schedule", attachments: "attachments", sessionFork: "session.fork", sessionRewind: "session.rewind", sessionReload: "session.reload", sessionResumeCommand: "session.resumeCommand", sessionConfigureLive: "session.configure.live", terminal: "terminal" });
 var PROMPT_IMAGES = Object.freeze({ mimeTypes: Object.freeze(["image/png", "image/jpeg", "image/gif", "image/webp"]), maxCount: 8, maxBytes: 5 * 1024 * 1024, maxTotalBytes: 11 * 1024 * 1024 });
-var RPC_METHODS = Object.freeze(["assignment.recall", "board.list", "catalog.get", "daemon.hello", "daemon.pause", "daemon.pauses", "daemon.resume", "daemon.shutdown", "daemon.status", "daemon.usage", "extension.register", "extension.unregister", "library.delete", "library.duplicate", "library.get", "library.list", "library.models", "library.rename", "library.save", "library.skills.set", "question.answer", "question.list", "question.watch", "session.archive", "session.attach", "session.close", "session.configure", "session.create", "session.get", "session.interrupt", "session.list", "session.log", "session.message", "session.preview", "session.prompt", "session.release", "session.rename", "session.status", "settings.language.get", "settings.language.set", "task.create", "task.gate.resolve", "task.list", "task.update", "team.list", "workspace.files.list", "workspace.files.read", "workspace.files.search"]);
+var RPC_METHODS = Object.freeze(["assignment.recall", "attachment.abort", "attachment.begin", "attachment.chunk", "attachment.commit", "attachment.delete", "attachment.get", "board.list", "catalog.get", "daemon.hello", "daemon.pause", "daemon.pauses", "daemon.resume", "daemon.shutdown", "daemon.status", "daemon.usage", "extension.register", "extension.unregister", "library.delete", "library.duplicate", "library.get", "library.list", "library.models", "library.rename", "library.save", "library.skills.set", "project.list", "project.register", "project.remove", "question.answer", "question.list", "question.watch", "registry.owner", "registry.worktree", "schedule.cancel", "schedule.create", "schedule.get", "schedule.list", "session.archive", "session.attach", "session.attention.clear", "session.close", "session.configure", "session.configure.preview", "session.create", "session.fork", "session.get", "session.history", "session.interrupt", "session.list", "session.log", "session.message", "session.preview", "session.prompt", "session.release", "session.reload", "session.rename", "session.resumeCommand", "session.rewind", "session.status", "settings.language.get", "settings.language.set", "task.create", "task.gate.resolve", "task.list", "task.update", "team.list", "terminal.attach", "terminal.close", "terminal.create", "terminal.input", "terminal.list", "terminal.resize", "terminal.revoke", "workspace.files.list", "workspace.files.read", "workspace.files.search", "workspace.get", "workspace.git.diff", "workspace.git.status", "workspace.list", "workspace.update", "workspace.worktree.create", "workspace.worktree.options", "workspace.worktree.remove"]);
 var WORKSPACE_FILES = Object.freeze({ maxReadBytes: 1024 * 1024, maxListEntries: 1e3, maxPathLength: 4096 });
+var WORKSPACE_GIT = Object.freeze({ maxFileBytes: 1024 * 1024, maxTotalBytes: 2 * 1024 * 1024, maxUntracked: 200, maxStatusFiles: 1e3, maxRefLength: 255 });
+var ATTACHMENTS = Object.freeze({
+  maxObjectBytes: 20 * 1024 * 1024,
+  maxPerPrompt: 8,
+  maxPromptBytes: 40 * 1024 * 1024,
+  maxChunkBytes: 256 * 1024,
+  maxActiveUploads: 2,
+  maxPrincipalBytes: 200 * 1024 * 1024,
+  maxDaemonBytes: 1024 * 1024 * 1024,
+  uploadTimeoutMs: 60 * 60 * 1e3,
+  unreferencedRetentionMs: 24 * 60 * 60 * 1e3,
+  releasedGraceMs: 7 * 24 * 60 * 60 * 1e3,
+  maxNameBytes: 255
+});
+var TERMINAL = Object.freeze({
+  maxPerPrincipal: 4,
+  maxPerDaemon: 16,
+  maxInputBytes: 64 * 1024,
+  maxOutputFrameBytes: 64 * 1024,
+  replayBytes: 1024 * 1024,
+  idleMs: 30 * 60 * 1e3,
+  maxLifetimeMs: 8 * 60 * 60 * 1e3,
+  reconnectMs: 60 * 1e3,
+  minCols: 2,
+  maxCols: 500,
+  minRows: 1,
+  maxRows: 200
+});
+var TERMINAL_LIMIT_KEYS = Object.freeze(["maxPerPrincipal", "maxPerDaemon", "maxInputBytes", "maxOutputFrameBytes", "replayBytes", "idleMs", "maxLifetimeMs", "reconnectMs"]);
+var ATTACHMENT_CHUNK_OVERHEAD = 64 * 1024;
 
 // packages/client/src/rpc/errors.js
 var BRAND = Symbol.for("@anhlp/alp-client/AlpClientError");
@@ -19108,6 +19138,8 @@ function lockAlive(lock) {
   }
 }
 var AlpClient = class extends AlpRpcClient {
+  /** Host features captured by connect's handshake. @type {readonly string[]} */
+  capabilities = [];
   /**
    * @param {import('node:net').Socket} socket a connected or connecting socket; the client owns it
    * @param {import('./rpc/client.js').AlpRpcClientOptions & import('./ipc.js').SocketTransportOptions} [options]
@@ -19133,7 +19165,8 @@ async function openSocket(socketPath) {
 async function connect(socketPath, client = { name: "alp", version: "0" }, options = {}) {
   const connection = new AlpClient(await openSocket(socketPath), options);
   try {
-    await hello(connection, client);
+    const greeting = await hello(connection, client);
+    connection.capabilities = Object.freeze(Array.isArray(greeting.capabilities) ? greeting.capabilities.filter((value) => typeof value === "string") : []);
   } catch (error51) {
     connection.close();
     throw error51;
@@ -19886,7 +19919,7 @@ ${item2.text}`;
 
 // packages/cli/src/acp/main.ts
 async function runAcp({ daemonEntry }) {
-  const version2 = true ? "0.0.1-beta.3" : "0.0.0";
+  const version2 = true ? "0.0.1-beta.4" : "0.0.0";
   const logger = createLogger({ component: "acp" });
   const log = (message, fields) => logger.warn(message, fields);
   const app = createAcpAgent({